$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer File: Oc4JWSydphzAPD0ySnxsrEd3zM8.cer (raw, json) Hash identifier: 9qCpCoIHbQ8UyINcf55vi5tfuts6P0MWaO8eeKSsOYk= Subject key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 65B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:43:47 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 2400:3800::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26038 (0x65b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:43:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:47:1f:41:31:e8:de:b5:89:fc:49:fb:43:0e: ea:af:8a:d2:82:02:bd:7c:f5:cb:56:48:3f:3e:7c: 8b:cd:c5:58:02:94:77:13:63:f8:b5:3e:41:f8:7e: 32:ea:f3:ed:51:07:3a:cf:22:85:95:28:35:ec:fe: 62:eb:5e:ae:75:a9:1d:0e:7f:f0:ac:ae:f2:a2:e7: 1f:fb:03:e8:78:29:4c:67:cd:c3:56:d3:16:e8:e7: 17:74:b0:13:4b:3d:50:69:0c:c0:15:e6:85:62:59: 40:65:90:a3:49:7a:96:ee:21:ef:ee:c9:d9:3c:1f: 93:bd:3e:f8:c8:4d:5e:52:28:6a:7b:4a:d6:ad:7b: 81:77:23:02:e0:de:d4:d1:a2:c7:b2:7b:e1:61:27: b4:b6:5d:9d:88:dd:ae:2e:14:07:5b:8a:41:cc:26: 31:bb:34:df:73:7b:42:31:d2:96:fb:78:06:24:a0: 3f:fe:6e:1a:d5:a6:12:45:32:99:fd:ca:ab:af:5a: f2:81:92:61:6e:ab:99:40:2c:65:9d:5d:4e:8e:05: 51:ec:a9:97:46:64:f5:ad:89:09:8b:3c:c0:54:b2: e0:68:15:43:10:8d:99:06:b8:d2:c6:1d:b9:e2:7e: 33:9c:17:cb:ff:a2:c3:e1:d2:0f:56:88:07:f6:4a: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:3800::/32 Signature Algorithm: sha256WithRSAEncryption 61:c2:29:85:45:fe:d1:0e:dd:0c:00:a7:43:28:ae:41:0a:52: 75:8e:94:6d:ff:97:0f:a0:00:3f:14:6f:3e:94:62:55:df:30: 1d:1f:64:b1:c9:2a:49:1f:4f:2d:02:de:aa:9e:d6:be:2a:76: 2e:45:65:a8:b2:51:6f:23:d6:89:17:df:45:76:ad:81:33:93: ee:7b:e0:07:50:3a:a9:c8:62:c9:b8:37:b7:95:cd:57:d9:70: 4a:58:48:10:0d:a7:d8:82:c5:8e:db:18:56:28:69:15:6a:7b: f7:64:1f:55:b6:57:b5:41:6c:b4:62:73:06:bb:ec:fa:86:9b: 37:f5:fa:f8:d8:64:fe:2c:fb:71:de:d9:eb:27:8a:cf:e6:1b: 6c:d4:77:98:e9:6d:89:99:fc:05:0f:d5:c2:55:65:e1:38:35: 6e:20:be:db:0e:99:fa:d9:c7:8b:c7:c0:f7:b4:08:5a:88:48: 82:2f:19:df:5f:48:00:10:df:49:13:10:56:8f:4a:8c:4b:f5: 02:67:1c:c1:0d:1e:7f:41:48:4a:92:b5:7a:4d:66:e7:f4:8e: fc:20:90:8f:bb:c0:6d:fa:d7:56:8d:ab:1d:b9:b6:1e:d8:e4: 5c:12:66:c3:ad:60:52:c4:7a:92:ba:a0:61:ea:c6:90:f2:82: ab:07:10:39 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICZbYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxNDM0N1oXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoMzlDRTA5NTkyQzlEQTYxQ0MwM0MzRDMyNEE3QzZDQUM0Nzc3Q0ND RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ5HH0Ex6N61ifxJ+0MO 6q+K0oICvXz1y1ZIPz58i83FWAKUdxNj+LU+Qfh+Murz7VEHOs8ihZUoNez+Yute rnWpHQ5/8Kyu8qLnH/sD6HgpTGfNw1bTFujnF3SwE0s9UGkMwBXmhWJZQGWQo0l6 lu4h7+7J2Twfk70++MhNXlIoantK1q17gXcjAuDe1NGix7J74WEntLZdnYjdri4U B1uKQcwmMbs033N7QjHSlvt4BiSgP/5uGtWmEkUymf3Kq69a8oGSYW6rmUAsZZ1d To4FUeypl0Zk9a2JCYs8wFSy4GgVQxCNmQa40sYdueJ+M5wXy/+iw+HSD1aIB/ZK DIcCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQ5zglZLJ2mHMA8PTJKfGysR3fMzzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxMDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTAyL09j NEpXU3lkcGh6QVBEMHlTbnhzckVkM3pNOC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkADgAMA0GCSqGSIb3 DQEBCwUAA4IBAQBhwimFRf7RDt0MAKdDKK5BClJ1jpRt/5cPoAA/FG8+lGJV3zAd H2SxySpJH08tAt6qnta+KnYuRWWoslFvI9aJF99Fdq2BM5Pue+AHUDqpyGLJuDe3 lc1X2XBKWEgQDafYgsWO2xhWKGkVanv3ZB9Vtle1QWy0YnMGu+z6hps39fr42GT+ LPtx3tnrJ4rP5hts1HeY6W2JmfwFD9XCVWXhODVuIL7bDpn62ceLx8D3tAhaiEiC LxnfX0gAEN9JExBWj0qMS/UCZxzBDR5/QUhKkrV6TWbn9I78IJCPu8Bt+tdWjasd ubYe2ORcEmbDrWBSxHqSuqBh6saQ8oKrBxA5 -----END CERTIFICATE-----Generated at Thu Mar 26 12:15:20 2026 by rpki-client